← CVE Radar
CVE-2026-84058Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.
9.8 CRITICALEPSS 0.37%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 8.1 | HIGH | 3.1ibm (CNA) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-84058
- Status
- Analyzed
- Assigner (CNA)
- ibm
- Published
- Oct 8, 2026
- Last modified
- 2026-10-14 20:28 UTC
- Weaknesses
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected Products
As published by the CNA in the CVE record.
IBMGuardium Data Protection3 version ranges
- 12.0
- 12.1
- 12.2